Security/Safe Browsing: Difference between revisions

Jump to navigation Jump to search
→‎History: fix heading levels
(→‎Overview: convert to a "history" section)
(→‎History: fix heading levels)
Line 7: Line 7:
You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292
You can read the discussion that lead up to to its integration in https://bugzilla.mozilla.org/show_bug.cgi?id=329292


== Prefs ==
= Prefs =


* <tt>browser.safebrowsing.debug</tt>: show debugging info from the JavaScript list update code on the command line
* <tt>browser.safebrowsing.debug</tt>: show debugging info from the JavaScript list update code on the command line
Line 35: Line 35:
* <tt>browser.safebrowsing.provider.google.updateURL</tt>: server endpoint for malware and phishing list updates
* <tt>browser.safebrowsing.provider.google.updateURL</tt>: server endpoint for malware and phishing list updates


== Documentation ==
= Documentation =
* [https://developers.google.com/safe-browsing/developers_guide_v2 Safe Browsing protocol v2.2]  
* [https://developers.google.com/safe-browsing/developers_guide_v2 Safe Browsing protocol v2.2]  
* [[Phishing Protection: Design Documentation|Design Documentation]]
* [[Phishing Protection: Design Documentation|Design Documentation]]
Line 41: Line 41:
* [[Phishing Protection: Client Spec|Client Spec]]
* [[Phishing Protection: Client Spec|Client Spec]]


== Engineering ==
= Engineering =
Product/Component: '''Toolkit/Safe Browsing'''
Product/Component: '''Toolkit/Safe Browsing'''


Line 55: Line 55:
* [https://people.mozilla.org/~fmarier/safebrowsing-dashboard/ Telemetry dashboard]
* [https://people.mozilla.org/~fmarier/safebrowsing-dashboard/ Telemetry dashboard]


=== Code walkthrough ===
== Code walkthrough ==


Both [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#611 nsBaseChannel::Open()] and [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#672 nsBaseChannel::AsyncOpen()] ask for the channel to be [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#306 "classified"] by
Both [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#611 nsBaseChannel::Open()] and [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#672 nsBaseChannel::AsyncOpen()] ask for the channel to be [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/netwerk/base/nsBaseChannel.cpp#306 "classified"] by
Line 64: Line 64:
When the [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/docshell/base/nsDocShell.cpp#7613 classification state of the page  changes], the appropriate UI [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/docshell/base/nsDocShell.cpp#4854  is shown].
When the [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/docshell/base/nsDocShell.cpp#7613 classification state of the page  changes], the appropriate UI [https://dxr.mozilla.org/mozilla-central/rev/f8086bd3c84fc1a42c3625cf3cc2253f0a5e8cfd/docshell/base/nsDocShell.cpp#4854  is shown].


== QA ==
= QA =


* [http://itisatrap.org/firefox/its-an-attack.html Malware], [http://itisatrap.org/firefox/its-a-trap.html phishing] and [http://itisatrap.org/firefox/unwanted.html unwanted software] test pages
* [http://itisatrap.org/firefox/its-an-attack.html Malware], [http://itisatrap.org/firefox/its-a-trap.html phishing] and [http://itisatrap.org/firefox/unwanted.html unwanted software] test pages
Confirmed users
908

edits

Navigation menu